PA-5000 Series Enterprise Firewall Appliance PA-5020 Palo Alto

Overview:

The Palo Alto Networks™ PA-5000 Series is comprised of three high performance models, the PA-5060, the PA-5050 and the PA-5020, all of which are targeted at high speed datacenter and Internet gateway deployments.

Use the PA-5060, PA-5050, and PA-5020 to safely enable applications, users, and content in high-speed datacenter, large Internet gateway, service provider, and multi-tenant environments. Predictable throughput levels of up to 20 Gbps are achieved using dedicated, function-specific processing for networking, security, content inspection, and management.

The PA-5000 Series delivers up to 20 Gbps of throughput using dedicated processing and memory for the key functional areas of networking, security, threat prevention and management. To ensure that management access is always available, irrespective of the traffic load, the data and control planes are physically separated. The controlling element of the PA-5000 Series is PAN-OS™, a security-specific operating system that allows organizations to safely enable applications using App-ID, User-ID, Content-ID, GlobalProtect and, WildFire.

Classify all applications, on all port, all the time with App-ID.

• Identify the application, regardless of port, encryption (SSL or SSH) or evasive technique employed.
• Use the application, not the port, as the basis for all safe enablement policy decisions: allow, deny, schedule, inspect, apply traffic shaping.
• Categorize unidentified applications for policy control, threat forensics, custom App-ID creation, or packet capture for App-ID development.

Extend safe application enablement policies to any user, at any location, with User-ID and GlobalProtect.

• Agentless integration with Active Directory, LDAP, eDirectory Citrix and Microsoft Terminal Services.
• Integrate with NAC, 802.1X wireless and other non-standard user repositories with an XML API.
• Deploy consistent policies to local and remote users running Microsoft Windows, Mac OS X, Linux, Android or iOS platforms.

Protect against all threat—both known and unknown—with Content-ID and Wildfire

• Block a range of known threats including exploits, malware and spyware, across all ports, regardless of common threat evasion tactics employed.
• Limit unauthorized transfer of files and sensitive data, and control non-workrelated web surfing.
• Identify unknown malware, analyze for more than 100 malicious behaviors, automatically create and deliver a signature in the next available update.